Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373130323a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666564323a373130323a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          OgP3GoKooW3hlLI96/Nfz+DrVtoJwa+IQV1MVkWUGt4=
Subject key identifier:   D8:DE:54:5A:9D:24:C5:29:21:91:D5:7A:9A:28:FF:A5:ED:1C:B9:FB
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       5A218EA348F1E7ACE5F797A5C2CB8A985D8013AC
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373130323a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:22 +0000
ROA not before:           Thu 16 Dec 2021 03:21:22 +0000
ROA not after:            Thu 15 Dec 2022 03:26:22 +0000
asID:                     53356
IP address blocks:        2602:fed2:7102::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:21:8e:a3:48:f1:e7:ac:e5:f7:97:a5:c2:cb:8a:98:5d:80:13:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:22 2021 GMT
            Not After : Dec 15 03:26:22 2022 GMT
        Subject: CN=D8DE545A9D24C5292191D57A9A28FFA5ED1CB9FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d7:7c:67:90:ac:bb:7f:97:1c:b4:45:0e:e9:
                    af:25:10:f7:57:dc:60:b6:85:53:0b:36:e3:3c:47:
                    60:a1:18:f3:13:d9:ae:7b:4c:72:ef:05:56:65:21:
                    b1:34:31:2a:db:35:c0:9b:b3:b2:51:20:6c:03:dd:
                    62:5e:0d:cb:87:74:60:b2:17:ba:a9:d2:5e:21:ca:
                    03:79:13:05:a3:70:e4:f6:56:7b:f3:4b:74:ab:c1:
                    ba:56:88:ad:ed:2b:3b:85:5d:be:fe:70:2f:0e:57:
                    58:f3:e7:23:c0:ed:9b:86:c5:17:fe:2f:6c:ee:76:
                    93:1f:74:12:c5:52:47:9d:eb:82:ee:fd:14:ee:68:
                    2d:46:36:be:01:25:f2:b7:16:94:9a:d4:a7:14:3d:
                    2d:db:3f:f9:58:e7:a7:74:f2:d5:52:f4:18:17:11:
                    c7:0f:b3:82:4b:15:ec:08:49:2a:a7:ca:5d:5e:ae:
                    11:c7:43:28:8e:a0:9f:9f:4c:3b:6a:e4:d4:d1:9c:
                    a7:15:b4:74:49:4d:e6:f1:28:13:03:c8:43:aa:4c:
                    e5:13:16:1a:1e:4a:6b:87:94:9d:54:a5:e8:71:12:
                    6d:c5:8c:56:e2:e6:18:bb:b2:ae:9e:d0:98:45:ee:
                    8c:b0:61:53:d8:17:93:e6:36:df:c9:e3:22:57:65:
                    0f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DE:54:5A:9D:24:C5:29:21:91:D5:7A:9A:28:FF:A5:ED:1C:B9:FB
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373130323a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7102::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:f4:71:5f:d4:16:2d:d0:10:89:34:89:f0:25:c2:22:e7:dd:
         9a:e7:fd:a6:66:7e:25:4f:a0:fd:4c:2e:bb:39:4f:ab:6c:aa:
         4c:8e:55:54:92:9a:82:db:05:83:a5:59:0b:8b:06:da:8e:e0:
         e4:5a:3c:c9:04:2b:49:e5:5c:58:4a:c1:cd:59:d7:95:34:e8:
         92:32:66:7b:95:02:a0:d3:b1:c0:7d:17:c9:d3:7a:c2:63:16:
         a1:02:fd:7d:7d:10:e7:1f:8f:1e:51:cd:2d:50:67:e6:a5:da:
         f2:53:3e:b6:47:79:5c:03:5c:38:26:d4:f2:82:d6:27:a2:aa:
         a1:8c:96:b5:c6:15:71:0e:7c:a7:ca:bc:66:97:c2:94:20:9a:
         aa:ce:fe:c7:3a:03:e3:2f:75:36:5c:ab:fd:dc:18:1a:08:cc:
         d4:19:57:86:fb:32:f6:9d:a2:28:f0:a8:6c:e3:55:03:c4:c6:
         c1:c5:f8:57:5b:4e:73:b0:90:54:da:bd:5f:b9:36:bf:4c:69:
         92:94:d2:fd:26:89:b6:cd:eb:c8:6d:f0:4b:a6:36:e2:cd:f3:
         45:a1:c5:85:1f:34:3a:45:c2:f1:bf:0d:c9:ab:cf:9f:66:2e:
         1f:21:d9:f5:f7:cf:ca:4f:07:17:1e:a0:9c:69:14:45:1a:b9:
         c2:b4:17:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----